Overview

overview

8

Static

static

6

6cca3a795f...18.apk

android-9-x86

8

6cca3a795f...18.apk

android-13-x64

plugin-deploy.apk

android-9-x86

plugin-deploy.apk

android-10-x64

plugin-deploy.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6cca3a795fde7b0c11490ceb8b5f3a57_JaffaCakes118

  • Size

    11.6MB

  • Sample

    240524-avwc9aeh64

  • MD5

    6cca3a795fde7b0c11490ceb8b5f3a57

  • SHA1

    2f0bef50337e0874d57d07e4381e5d3fda93b549

  • SHA256

    4454cccb94108923291ffcf26131191b3ea8bfa13c6a40c72ddf9d285be55def

  • SHA512

    e4442a2ebeb78cd0f43dee8526ae937d688529bc898039810bc25066d8aff8cdf2f42c22097b1aff0a3305d654461ce1f1d9a1aac3493338e886d576f2887962

  • SSDEEP

    196608:8+DnIKmnn7WxjCndgF1jAoWYq/BSBdiMkdM71ZJae4lf0va1guSYBMwoqecZae9q:VKnnHg+ABdiMBtw0vIgeUqq

Score
8/10
androidcollectiondiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      6cca3a795fde7b0c11490ceb8b5f3a57_JaffaCakes118

    • Size

      11.6MB

    • MD5

      6cca3a795fde7b0c11490ceb8b5f3a57

    • SHA1

      2f0bef50337e0874d57d07e4381e5d3fda93b549

    • SHA256

      4454cccb94108923291ffcf26131191b3ea8bfa13c6a40c72ddf9d285be55def

    • SHA512

      e4442a2ebeb78cd0f43dee8526ae937d688529bc898039810bc25066d8aff8cdf2f42c22097b1aff0a3305d654461ce1f1d9a1aac3493338e886d576f2887962

    • SSDEEP

      196608:8+DnIKmnn7WxjCndgF1jAoWYq/BSBdiMkdM71ZJae4lf0va1guSYBMwoqecZae9q:VKnnHg+ABdiMBtw0vIgeUqq

    Score
    8/10
    collectiondiscoveryevasionimpactpersistence

    • Requests cell location

      Uses Android APIs to to get current cell location.

      collectiondiscoveryevasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

      discovery

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Checks if the internet connection is available

      discovery
    behavioral1behavioral2

    • Target

      plugin-deploy.jar

    • Size

      213KB

    • MD5

      e70723b8f6c4c7c09a6019733022cf53

    • SHA1

      e3ca32166c65e4dc73c21347ab22d54a7b5a9a83

    • SHA256

      32d35cd80b0302e3fcdd7349b4ff9a7b689ce080435109607ff79a834ff710d5

    • SHA512

      461c0499193c5ef5aa4e2e5d358031e7d28c98c8e1e38d22b710271bf3b561c28232bfaadbc2c275357e31b7b0ad6bca798008328ac3cff3701c1c9cca2ddddd

    • SSDEEP

      6144:zIojh8YSG6e3Q7RZddAOKofd3yugpauc79lPcJJ6:Uoj2Ytg7RXdJfRyuVuCoJo

    Score
    1/10
    behavioral3behavioral4behavioral5

MITRE ATT&CK Matrix

Tasks